$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa File: cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa (raw, json) Hash identifier: b2bg70mTfdgNdoNU3vUTm4Br6vNamZzGF4nsVt1jyT0= Subject key identifier: A2:53:FA:CD:24:26:68:BD:55:8C:AD:C5:22:54:97:9C:3E:5C:4C:00 Certificate issuer: /CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Certificate serial: 010D0C9F43285845131AD948A2732169D6D75700 Authority key identifier: 3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa Signing time: Sat 02 Mar 2024 14:00:31 +0000 ROA not before: Sat 02 Mar 2024 14:00:31 +0000 ROA not after: Fri 31 May 2024 13:00:31 +0000 asID: 209242 IP address blocks: 23.145.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:13:1a:d9:48:a2:73:21:69:d6:d7:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Validity Not Before: Mar 2 14:00:31 2024 GMT Not After : May 31 13:00:31 2024 GMT Subject: CN=b28e0624-0e38-4b44-b11e-17d2eff33b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7f:46:05:cf:ab:6d:00:98:40:35:3e:3b:3d: 60:a3:dc:5a:70:84:01:71:49:d8:85:19:cc:cb:c2: 5c:41:13:b9:3e:31:04:f5:c9:b0:91:0b:75:e5:25: 89:a7:9e:9d:9f:9a:15:9a:e8:4e:12:ab:ee:77:c8: 9a:14:7c:8e:94:62:f5:ab:84:e5:1c:4e:7b:60:e5: b0:a4:4e:b1:41:2f:b4:ca:1a:dc:c0:28:48:8e:32: de:98:f7:ee:31:7b:44:b5:3b:05:59:a9:00:49:84: 5a:18:60:cc:2f:46:2b:69:ba:fc:26:19:82:93:2b: a0:41:36:d6:85:4d:2f:ce:a7:01:57:26:03:97:37: 25:ae:56:47:9b:46:43:be:a3:1b:32:84:0b:fc:75: 2c:29:cc:75:02:21:97:2f:f1:01:17:c6:b9:73:37: d2:da:09:e9:95:6b:c9:3c:1f:7e:af:43:d4:c6:0b: 38:58:c6:92:3d:a6:0a:ea:f1:98:69:f5:8b:25:c7: 01:88:c7:a4:a0:3e:71:14:5b:14:93:e1:7b:93:05: 45:72:bb:bb:05:57:ca:a9:7f:be:0c:9f:c2:f6:e5: ac:f8:b2:04:22:ef:bd:ef:99:38:05:b0:b1:09:83: 81:a0:72:13:22:8b:a4:52:d2:9f:50:28:f4:a8:41: 96:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:53:FA:CD:24:26:68:BD:55:8C:AD:C5:22:54:97:9C:3E:5C:4C:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl X509v3 Authority Key Identifier: keyid:3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer sbgp-ipAddrBlock: critical IPv4: 23.145.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:e8:90:46:9e:24:ef:cb:d5:3d:71:7c:cd:41:bf:18:31:5d: 45:c5:71:8d:9a:3b:b0:7b:e2:93:8c:68:85:51:6d:4d:4a:f5: 2f:6b:0a:e1:2d:ad:d3:c1:55:47:69:d4:d2:2b:0f:7d:ba:17: 26:41:b0:9c:80:b4:0b:6f:ad:bb:6f:79:dd:8b:19:9a:0a:f7: d7:97:59:9d:ab:34:55:f7:11:4c:85:c9:39:97:1e:ca:db:cb: 0b:b2:7a:46:b9:73:de:ea:fc:17:61:08:06:38:3d:9a:36:d3: 3d:7a:78:ee:ab:37:c7:c2:2e:46:cc:42:6c:46:f9:b6:6e:53: ff:40:7c:cc:2d:84:35:6b:63:30:16:14:bf:13:e5:67:08:51: 1b:92:99:0b:80:2a:bc:42:25:81:83:3b:b3:d7:f6:60:18:37: a8:36:88:d5:0e:08:dd:07:34:3b:8d:c6:a9:33:e7:86:cf:dd: ed:45:2b:0f:92:21:c0:e1:54:5f:e8:c9:19:03:89:f4:e5:a7: 4a:71:d4:14:3e:f8:ef:ad:63:48:7e:09:13:30:ce:26:df:a5: 17:0f:31:23:c4:70:ae:57:22:8f:7b:c8:b7:f9:ab:40:70:92: a1:cc:95:84:4c:6c:04:92:7f:f9:d0:e3:89:8a:a2:a1:7d:4c: 20:21:fb:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUTGtlIonMhadbXVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI5YmYyZjQtYzgzMS00ZjFlLWEyZDUtZDdmYzQwNTM1 YzhmMB4XDTI0MDMwMjE0MDAzMVoXDTI0MDUzMTEzMDAzMVowLzEtMCsGA1UEAxMk YjI4ZTA2MjQtMGUzOC00YjQ0LWIxMWUtMTdkMmVmZjMzYjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhn9GBc+rbQCYQDU+Oz1go9xacIQBcUnYhRnM y8JcQRO5PjEE9cmwkQt15SWJp56dn5oVmuhOEqvud8iaFHyOlGL1q4TlHE57YOWw pE6xQS+0yhrcwChIjjLemPfuMXtEtTsFWakASYRaGGDML0Yrabr8JhmCkyugQTbW hU0vzqcBVyYDlzclrlZHm0ZDvqMbMoQL/HUsKcx1AiGXL/EBF8a5czfS2gnplWvJ PB9+r0PUxgs4WMaSPaYK6vGYafWLJccBiMekoD5xFFsUk+F7kwVFcru7BVfKqX++ DJ/C9uWs+LIEIu+975k4BbCxCYOBoHITIoukUtKfUCj0qEGWaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJT+s0kJmi9VYytxSJUl5w+XEwAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjli ZjJmNC1jODMxLTRmMWUtYTJkNS1kN2ZjNDA1MzVjOGYvY2I0YjVlZTYtYmMwOC0z ZDYwLTkxOWEtODhmNzkyYzdiNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWI5YmYyZjQtYzgzMS00ZjFlLWEy ZDUtZDdmYzQwNTM1YzhmLzFiOWJmMmY0LWM4MzEtNGYxZS1hMmQ1LWQ3ZmM0MDUz NWM4Zi5jcmwwHwYDVR0jBBgwFoAUPMMWR4yxJu0PqWMpogFuhbqQmokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjliZjJmNC1jODMxLTRmMWUtYTJkNS1kN2Zj NDA1MzVjOGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrokEaeJO/L1T1xfM1BvxgxXUXFcY2aO7B74pOMaIVRbU1K9S9rCuEt rdPBVUdp1NIrD326FyZBsJyAtAtvrbtved2LGZoK99eXWZ2rNFX3EUyFyTmXHsrb ywuyeka5c97q/BdhCAY4PZo20z16eO6rN8fCLkbMQmxG+bZuU/9AfMwthDVrYzAW FL8T5WcIURuSmQuAKrxCJYGDO7PX9mAYN6g2iNUOCN0HNDuNxqkz54bP3e1FKw+S IcDhVF/oyRkDifTlp0px1BQ++O+tY0h+CRMwzibfpRcPMSPEcK5XIo97yLf5q0Bw kqHMlYRMbASSf/nQ44mKoqF9TCAh+1k= -----END CERTIFICATE-----Generated at Tue May 7 15:27:58 2024 by rpki-client on console-fra.rpki-client.org